2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84[.]exe

General

Target
2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84.exe
Size 812KB
Sample260719-qa36cses6v
SHA256 2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84
MD5 7972b08246e568495d9d116fc2d0b159
SHA1 3e12225494f08369858453fd9fc7481b4f788165
SHA512 f0ead246f31d1badb3cd5fd67cb5b3081f027fdad44dd50364734d61722f1bc2cacb1ad5d842ca3f7000a2699e7bdf059a508b54a95f5e155ae274d70e833ff7
SSDEEP 24576:60oeRhL4Zihw/WaRupypku1ADMH0h0kT:60J482RuRuQMm
TLSH
T16C05024253E1AD20D5A2EB32DE3EF6F4762DB8019E687B5A23187F3F19711D2C522315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84.exe

File Explorer

2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84.exe

.exe 812KB

2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84.exe

IMPHASH 00e87a3230db3a6bdb4035240d620685
SHA256 2a6c90c8db27e6ac04c7e339dfe4b3c2d47a292bcf6fc1c5b4e0ae62fc81ff84
MD5 7972b08246e568495d9d116fc2d0b159
SHA1 3e12225494f08369858453fd9fc7481b4f788165
SHA512 f0ead246f31d1badb3cd5fd67cb5b3081f027fdad44dd50364734d61722f1bc2cacb1ad5d842ca3f7000a2699e7bdf059a508b54a95f5e155ae274d70e833ff7
SSDEEP 24576:60oeRhL4Zihw/WaRupypku1ADMH0h0kT:60J482RuRuQMm
TLSH
T16C05024253E1AD20D5A2EB32DE3EF6F4762DB8019E687B5A23187F3F19711D2C522315
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19882

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount GetNumberFormatA GetConsoleAliasExesW SetCommState GlobalAlloc LoadLibraryW LocalShrink GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost VerifyVersionInfoW GetLogicalDriveStringsA GetCurrentDirectoryW SetLastError GetProcAddress CreateNamedPipeA GetConsoleDisplayMode GetProcessVersion SetEnvironmentVariableW InterlockedExchangeAdd CreateFileMappingW GetNumberFormatW CreateEventW OpenEventA QueryDosDeviceW GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect WaitForDebugEvent PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LCMapStringW CommConfigDialogW HeapReAlloc RtlUnwind HeapSize RaiseException SetDefaultCommConfigW GetCurrentProcess SetEndOfFile LoadLibraryA GetLocaleInfoA MultiByteToWideChar GetLastError HeapFree HeapAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetStringTypeW Sleep

user32

LoadMenuW CharUpperW GetSysColor GetMenuStringA GetCaretPos DrawStateA

gdi32

GetCharWidthFloatA CreateDCW GetCharWidth32A GetBitmapBits

Sharing